← The Plot

Privacy Policy

Last updated: 17 October 2026

Who is responsible

The Plot UG (haftungsbeschränkt), Gipsstraße 15, 10119 Berlin, Germany, is responsible for the processing described in this notice. Contact hello@theplot.agency with privacy questions or requests.

Enquiries and business relationships

When you email us or submit our contact form, we process the information you provide, including your name, company, email address, message and related correspondence. We use it to respond, discuss your requirements and prepare proposals. If an engagement follows, we also process contact, contract, invoice and payment information to deliver the services, administer the relationship and meet legal duties. Required form fields are needed to respond to your request. Please do not include card numbers or sensitive personal information in your message.

Our legal bases are taking steps at your request before a contract or performing a contract with you, where applicable (Article 6(1)(b) GDPR); our legitimate interests in responding to business enquiries, maintaining client relationships and operating securely (Article 6(1)(f)); and legal obligations, including accounting duties (Article 6(1)(c)). Optional marketing and tracking that require consent rely on Article 6(1)(a).

Website hosting and forms

Our website is hosted on Shopify. Shopify processes technical information needed to deliver and protect the website, such as IP address, browser and device information, page requests and security information. Contact submissions are processed through the website platform and our business email systems, including Google Workspace. Where Shopify uses hCaptcha to protect forms against spam, device, browser and interaction information is processed for that security purpose. Our legitimate interest is operating a reliable website and protecting it against misuse.

Provider information: Shopify, https://www.shopify.com/legal/privacy; Google, https://policies.google.com/privacy; hCaptcha, https://www.hcaptcha.com/privacy.

Fonts cookies and analytics

The website uses Adobe Fonts to display its typography. Loading fonts connects your browser to Adobe and can transmit your IP address, browser information and information about the website serving the font. See https://www.adobe.com/privacy/policies/adobe-fonts.html. We use fonts for consistent presentation; where consent is legally required, loading is subject to that consent.

Shopify uses cookies and similar technologies for website functionality and security, and provides analytics that help us understand website use. Essential technologies support functions you request; optional analytics or marketing technologies are used only where the required consent has been obtained. You can manage optional preferences through the website’s cookie settings and withdraw consent there. Browser settings also let you delete or block cookies, although some features may be affected. Shopify’s cookie information is available at https://www.shopify.com/legal/cookies.

Payments and access to information

For invoiced services, we use payment providers such as Wise. When you follow a hosted payment link, the provider processes payment details under its own privacy information. We use transaction details needed to identify your payment, reconcile invoices and handle queries. Submit card details only through the provider’s payment page. Wise’s privacy information is at https://wise.com/privacy-policy.

Access is limited to people and service providers who need the information for the purposes described, including our team, website and email providers, payment providers and professional advisers. We may also disclose information where legally required. External website links lead to services governed by their own privacy notices.

International processing

Our providers and international team may process information outside the European Economic Area. Where required, we use an applicable adequacy decision or appropriate contractual safeguards, including the European Commission’s standard contractual clauses. Shopify describes its international processing at https://help.shopify.com/en/manual/privacy-and-security/privacy/international-data-transfers. Contact us for information about safeguards applicable to your data.

How long we keep information

We keep enquiry information while responding and assessing a potential engagement, and for any further period needed for an ongoing business relationship or legal claims. We retain client, invoice and payment records for applicable statutory periods. Technical logs and provider records are retained according to their operational purposes, security needs and applicable legal obligations. We delete or anonymise information when it is no longer needed; the relevant criteria are the purpose, our relationship with you, legal retention duties and any outstanding claim or dispute.

Your rights

Subject to applicable conditions, you may request access to your personal data, correction, deletion, restriction of processing or portability. You may object to processing based on legitimate interests for reasons relating to your particular situation, and object to direct marketing at any time. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

To exercise these rights, email hello@theplot.agency. We may request information needed to verify your identity. You may also complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-berlin.de.

Updates

We may update this notice to reflect changes in our services, website or processing. The date above identifies the latest version.